This archive is essential for "Air-Gapped" or offline environments where security policies prevent the Nessus scanner from connecting directly to Tenable's update servers.
:
You must have a registered scanner instance to obtain the necessary credentials. download nessusupdateplugins all20targz top
This guide explains how to download and install the plugin archive. This file contains the complete set of Nessus vulnerability definitions required for offline systems. What is the Nessus all-20.tar.gz File?
: If you are using Tenable Security Center , the process is slightly different; you upload the plugin archive through the System > Configuration > Plugins/Feed menu. Perform an Offline Nessus Plugin Update This archive is essential for "Air-Gapped" or offline
—contain the algorithms used to identify security issues. For systems without direct internet access, manual updates are the standard workflow. 1. Obtaining the Plugin Archive
| Issue | Likely Cause | Solution | | :--- | :--- | :--- | | | Insufficient disk space, corrupted download | Verify disk space (requires 20GB+). Re-download the file from the same link, checking its size against Tenable's provided checksums. Clear the /opt/nessus/var/nessus/tmp directory before retrying. | | Service Won't Start (503 Error) | Port conflict (8834), expired SSL certificate, firewall | Check if port 8834 is already in use ( netstat -tulpn | grep 8834 ). Verify the ca.crt certificate in /opt/nessus/var/nessus/CA/ is not expired. Ensure firewalls permit port 8834. | | Plugins Not Loading After Update | Incorrect file permissions, residual cache | Ensure plugins directory ( /opt/nessus/lib/nessus/plugins ) is owned by the Nessus user ( chown -R nessus:nessus /opt/nessus/lib/nessus/plugins ). Delete all temporary files from /opt/nessus/var/nessus/tmp and restart the service. | | "No valid challenge code found" | Failed to generate challenge code | Re-run the nessuscli fetch --challenge command. Ensure the Nessus service is running before executing it. | | Connection Timeout / Slow Download | Network restrictions, geographic distance | Use a reliable VPN service. Prefer the offline method described in this guide. | This file contains the complete set of Nessus
You must generate this unique code from the machine where Nessus is installed. Via Command Line (CLI): Open Command Prompt as Administrator and run:
: Use this challenge string along with your activation code on the Tenable Offline Registration page to receive a download link for the plugin archive. 2. Manual Installation via User Interface